毒网挖

显示全部楼层 · 发表于 2007-11-18 00:38:10

http://xxx.mmma.biz/get.exe-->

http://xxx.mmma.biz/big1.exe
http://xxx.mmma.biz/big.exe

显示全部楼层 · 发表于 2007-11-18 00:40:20

已删除: 风险软件 not-a-virus:NetTool.Win32.Agent.b 文件: F:\病毒样本\3.zip/big1.exe//data.rar/ppc.exe//data.rar/PVC.exe
已删除: 木马程序 Trojan-Downloader.Win32.Agent.blm 文件: F:\病毒样本\3.zip/big.exe
已删除: 木马程序 Trojan-Downloader.Win32.Delf.cuo 文件: F:\病毒样本\3.zip/get.exe

抓得真快~

显示全部楼层 · 发表于 2007-11-18 00:52:51

Objekt: get.exe
In Archiv: C:\3.zip
Status: Virus gefunden
Virus: Trojan-Downloader.Win32.Delf.cuo (KAV Engine)
Objekt: big.exe
In Archiv: C:\3.zip
Status: Virus gefunden
Virus: Trojan-Downloader.Win32.Agent.blm (KAV Engine)
Objekt: big1.exe/data.rar/ppc.exe/data.rar PVC.exe
In Archiv: C:\3.zip
Status: Virus gefunden
Virus: not-a-virus:NetTool.Win32.Agent.b (KAV Engine)
Objekt: 3.zip
Pfad: C:
Status: Virus gefunden
Virus: Trojan-Downloader.Win32.Delf.cuo, Trojan-Downloader.Win32.Agent.blm, not-a-virus:NetTool.Win32.Agent.b (KAV Engine)

显示全部楼层 · 发表于 2007-11-18 01:22:16

R:\3.zip » ZIP » get.exe - a variant of Win32/TrojanDownloader.Delf.NJH trojan
R:\3.zip » ZIP » big.exe - a variant of Win32/Agent.NLW trojan
R:\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » PVC.exe - Win32/NetTool.Agent.B application

显示全部楼层 · 发表于 2007-11-18 02:30:18

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\3.zip'
C:\Users\morgan\Documents\
  3.zip
[0] Archive type: ZIP
--> get.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.cuo.1
      [WARNING] Infected files in archives cannot be repaired!
--> big.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.blm.3
      [WARNING] Infected files in archives cannot be repaired!
--> big1.exe
      [1] Archive type: RAR SFX (self extracting)
      --> runppc.exe
         [DETECTION] Contains detection pattern of the dropper DR/BAT.DelFiles
         [WARNING] Infected files in archives cannot be repaired!
      --> ppc.exe
         [DETECTION] Contains detection pattern of the dropper DR/Agent.318861
         [WARNING] Infected files in archives cannot be repaired!
      [2] Archive type: RAR SFX (self extracting)
      --> wpcap.dll
      --> npptools.dll
      --> drivers\npf.sys
      --> PVC.exe
            [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
            [WARNING] Infected files in archives cannot be repaired!
      --> Packet.dll
      --> WanPacket.dll
      --> runpvc.exe
            [DETECTION] Is the Trojan horse TR/Batch.A
            [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

End of the scan: 2007年11月17日  10:30
Used time: 00:05 min

The scan has been done completely.

   0 Scanning directories
   13 Files were scanned
   6 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   7 Files not concerned
   3 Archives were scanned
   7 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-11-18 09:00:50

Scan Log
Version of virus signature database: 2665 (20071117)
Date: 2007-11-18 Time: 8:58:16
Scanned disks, folders and files: D:\firefox下载的文件\3.zip
D:\firefox下载的文件\3.zip » ZIP » get.exe - a variant of Win32/TrojanDownloader.Delf.NJH trojan - was a part of the deleted object
D:\firefox下载的文件\3.zip » ZIP » big.exe - a variant of Win32/Agent.NLW trojan - was a part of the deleted object
D:\firefox下载的文件\3.zip » ZIP » big1.exe » RAR » runppc.exe - is OK
D:\firefox下载的文件\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » wpcap.dll - is OK
D:\firefox下载的文件\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » npptools.dll - is OK
D:\firefox下载的文件\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » drivers\npf.sys - is OK
D:\firefox下载的文件\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » PVC.exe - Win32/NetTool.Agent.B application - was a part of the deleted object
D:\firefox下载的文件\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » Packet.dll - is OK
D:\firefox下载的文件\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » WanPacket.dll - is OK
D:\firefox下载的文件\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » runpvc.exe - is OK
Number of scanned objects: 13
Number of threats found: 3
Time of completion: 08:58:22 Total scanning time: 6 sec (00:00:06)

显示全部楼层 · 发表于 2007-11-18 10:40:34

Scan Log
Version of virus signature database: 2665 (20071117)
Date: 2007-11-18 Time: 10:40:28
Scanned disks, folders and files: G:\V\3.zip
G:\V\3.zip » ZIP » get.exe - a variant of Win32/TrojanDownloader.Delf.NJH trojan - was a part of the deleted object
G:\V\3.zip » ZIP » big.exe - a variant of Win32/Agent.NLW trojan - was a part of the deleted object
G:\V\3.zip » ZIP » big1.exe » RAR » runppc.exe - is OK
G:\V\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » wpcap.dll - is OK
G:\V\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » npptools.dll - is OK
G:\V\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » drivers\npf.sys - is OK
G:\V\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » PVC.exe - Win32/NetTool.Agent.B application - was a part of the deleted object
G:\V\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » Packet.dll - is OK
G:\V\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » WanPacket.dll - is OK
G:\V\3.zip » ZIP » big1.exe » RAR » ppc.exe » RAR » runpvc.exe - is OK
Number of scanned objects: 13
Number of threats found: 3
Time of completion: 10:40:29 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-11-18 11:38:49

rs全挂

显示全部楼层 · 发表于 2007-11-18 12:01:17

病毒 2007-11-18 12:00:23 C:\毒网mmma.zip\big1.exe Win32.Troj.Agent.365538 跳过，未处理
病毒 2007-11-18 12:00:23 C:\毒网mmma.zip\big.exe Win32.TrojDownloader.Agent.61440 跳过，未处理

金山毒霸2008

显示全部楼层 · 发表于 2007-11-18 13:15:40

Start of the scan: 2007年11月18日  13:15

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\3.zip
  [0] Archive type: ZIP
  --> get.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.cuo.1
  --> big.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.blm.3
--> big1.exe
   [1] Archive type: RAR SFX (self extracting)
   --> runppc.exe
      [DETECTION] Contains detection pattern of the dropper DR/BAT.DelFiles
   --> ppc.exe
      [DETECTION] Contains detection pattern of the dropper DR/Agent.318861
      [2] Archive type: RAR SFX (self extracting)
      --> PVC.exe
         [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      --> runpvc.exe
         [DETECTION] Is the Trojan horse TR/Batch.A
   [INFO]    The file was deleted!

End of the scan: 2007年11月18日  13:15
Used time: 00:09 min

The scan has been done completely.

   1 Scanning directories
   13 Files were scanned
   6 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   7 Files not concerned
   3 Archives were scanned
   0 Warnings
   0 Notes

[病毒样本] 毒网挖

本帖子中包含更多资源

浏览过的版块